In a two 3-day workshop, a Swiss energy company were trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants